Cyber Resilience Act: What Incidents and Vulnerabilities Must Be Reported?

What incidents and vulnerabilities must be reported under the Cyber Resilience Act (CRA)? Since 11 September 2026, the CRA reporting obligations are in force, with companies required to assess and report certain cybersecurity incidents and actively exploited vulnerabilities through the ENISA reporting platform. In this video, I explain: * What events and vulnerabilities need to be reported * How companies should assess whether a report is required * What internal processes should be put in place * What companies need to do to comply with the CRA And yes, there is also a brief appearance by my Neapolitan horn socks. 😉  Send us Fan Mail